Why your business emails keep landing in spam (and how to fix it)
By Andrew Fenwick 27 July 2026 News
If your quotes, enquiry replies and invoices are quietly landing in customers’ spam folders, the cause is almost always the same. Your email domain is not properly authenticated, so Google, Yahoo and Microsoft no longer trust it. In 2026 those three providers do not just filter unauthenticated mail. They reject a lot of it outright, before it ever reaches an inbox. The fix is a combination of correct technical setup behind the scenes and a website and enquiry flow that back it up. That is exactly the work our team handles alongside One IT Support.
Below is what changed, why it hits North East businesses harder than most people realise, and how to make sure a genuine enquiry never disappears again.
What actually changed
Email deliverability stopped being a reputation gradient and became a pass or fail gate.
Google and Yahoo started enforcing stricter sender rules in February 2024. Microsoft followed for Outlook, Hotmail and Live addresses. By late 2025 the soft warnings turned into hard rejections, so mail that fails the checks is now bounced rather than filed in spam. Between them these providers cover the vast majority of business and personal inboxes in the UK, so if your mail fails their checks it fails almost everywhere.
The three checks that matter are SPF, DKIM and DMARC. In plain terms:
SPF confirms which servers are allowed to send email for your domain.
DKIM adds a tamper-proof signature that proves the message really came from you.
DMARC ties the two together and tells inbox providers what to do when something does not line up.
Having one or two of these is no longer enough. Providers now expect all three, correctly aligned and actually working. A setup that looks present but is misconfigured behaves the same as having nothing at all.
Why this matters even if you are not a bulk sender
Most people assume these rules only apply to marketing platforms blasting thousands of emails a day. The technical thresholds do target high volume senders, but in practice the trust signals are applied across the board. That includes the everyday one-to-one email your business depends on. The reply to a website enquiry. The quote you send after a site visit. The booking confirmation. The invoice.
This is the part that costs North East businesses real money. A customer fills in your contact form, you reply within the hour, and your message drops straight into their junk folder because your domain is not authenticated. They assume you never got back to them and they call the next firm on the list. You never see the lost job, so you never know it happened. Multiply that across a year and the numbers are not small.
The gap is stark. Properly authenticated senders reach the inbox reliably, while unauthenticated mail is far more likely to be filtered or rejected. Fixing it is not a nice to have. It is the difference between winning the enquiry and losing it silently.
The signs your deliverability is broken
You may already be seeing the symptoms without connecting them to email authentication:
Customers say they never received your reply, even though you sent it.
Confirmation or reset emails from your website are not arriving.
Your enquiry form works but leads seem to go quiet after the first message.
Emails from your domain land in spam when you test them against a Gmail or Outlook address.
Any one of these is worth a proper look. Together they usually point to the same underlying problem.
Where web design and UX come into it
Deliverability is not only a DNS job. A lot of missed enquiries come from the website itself.
If your contact form sends from a mismatched address, uses a generic no-reply that fails authentication, or fires confirmation emails through a plugin that is not aligned with your domain, you can have perfect DNS and still lose leads. The form, the sending setup and the domain all need to speak to each other. This is where our design and development work matters as much as the technical configuration. We make sure the enquiry journey on your site is clear, the forms are reliable, and every automated message they trigger is set up to actually arrive.
Good UX gets the enquiry started. Correct authentication makes sure your reply lands. You need both, and they need to be built to work together.
How our team and One IT Support fix it
This is a joined-up job, which is why we handle it as one. One Design Group leads the creative, web and conversion side. One IT Support provides the specialist technical foundations, from domains and DNS to Microsoft 365 and wider infrastructure. Together we cover the whole chain rather than leaving you to coordinate between a web person and an IT person who never speak.
A typical piece of work looks like this:
We audit your current SPF, DKIM and DMARC setup and identify exactly what is failing and why.
We configure authentication correctly and align it with every system that sends on your behalf, including your website, your CRM and your marketing tools.
We review your enquiry forms, confirmation emails and sending addresses so nothing is quietly bouncing.
We move your DMARC policy forward safely, from monitoring to full enforcement, so your domain cannot be spoofed and your reputation keeps improving.
We keep an eye on it, because provider rules keep tightening and a setup that passes today can drift out of line as your tools change.
The result is simple. Your emails reach people, your enquiries get answered, and you stop losing work you never knew you were losing.
The takeaway
If your business emails are landing in spam, it is a fixable technical problem, not bad luck. In 2026 the major providers reward domains they can verify and reject the ones they cannot. Getting SPF, DKIM and DMARC right, and making sure your website and forms support them, protects the enquiries and customers that keep your business growing.
You can see the full range of technical and optimisation work we offer on our digital support, IT and optimisation page. If you think email deliverability might be costing you leads, get in touch and we will run the checks for you.
Frequently asked questions
Why are my business emails going to spam?
Usually because your domain is not properly authenticated. In 2026 Google, Yahoo and Microsoft filter or reject email that fails SPF, DKIM and DMARC checks, so mail from an unverified domain often does not reach the inbox even when the message is completely legitimate.
What are SPF, DKIM and DMARC?
They are three email authentication records that prove your messages are genuine. SPF lists the servers allowed to send for your domain, DKIM adds a signature that proves the message was not tampered with, and DMARC ties them together and tells inbox providers how to handle anything that does not align.
Do these rules apply to small businesses?
Yes, in practice. The formal thresholds target high volume senders, but inbox providers apply the same trust signals to everyday business email. That means a small firm replying to a single enquiry can still land in spam if its domain is not authenticated.
How can One Design Group help with email deliverability?
We audit and fix your authentication setup alongside One IT Support, align it with your website, forms and marketing tools, and make sure every message your business sends is built to arrive. You get the technical configuration and the web and UX side handled together rather than in isolation.
About the author
Andrew Fenwick
Head of Web and Digital, One Design Group
Andrew leads web, SEO and AI search visibility at One Design Group. He has spent a career building websites, shaping strategic content and getting businesses found online, from WordPress design and UX to the SEO and AI search work that decides who gets seen today. It is a craft he first learned in journalism, as a staff writer at Metro and a contributor to the Guardian, and later sharpened by retraining in artificial intelligence at Saïd Business School, University of Oxford. In short, he builds sites that work then makes sure people find them.